docs: add v0.41.0/0.41.1 changelog, transcription config to cheatsheet, update AGENTS.md version

- CHANGELOG: v0.41.0 (transcribe tool) + v0.41.1 (bug fixes & tests)
- CHEATSHEET: transcription config section with model/language/auto_transcribe
- AGENTS.md: version bump to v0.41.1, add transcribe to tools table

Author: molty3000

AGENTS.md

@@ -12,7 +12,7 @@ It provides context about the project's architecture, conventions, and how to up
 - **Binary:** `odek` — single static binary, ~12 MB, instant startup.
 - **Config:** Five-layer priority: `~/.odek/secrets.env` → `~/.odek/config.json` → `./odek.json` → `ODEK_*` env vars → CLI flags.
 - **Benchmark:** AIEB v2.0 — 80.3% (highest published agent score on the Autonomous Intelligence Engineering Benchmark).
-- **Version:** v0.37.x — see latest tag at https://github.com/BackendStack21/odek/releases
+- **Version:** v0.41.1 — see latest tag at https://github.com/BackendStack21/odek/releases
 
 ## Source Layout
 
@@ -87,6 +87,7 @@ ReAct cycle: observe → think → act → repeat.
 | Zero-fork data | `math_eval` — native arithmetic, `diff` — LCS diff, `json_query` — dot-path JSON, `tr` — text transform, `base64` — encode/decode |
 | File analysis | `glob` — fast glob find, `file_info` — stat metadata, `count_lines` — streaming line count, `word_count` — streaming word count, `checksum` — SHA256/SHA1/MD5, `sort` — sort lines, `head_tail` — first/last N lines |
 | Multi-pattern | `multi_grep` — N regex patterns parallel, `tree` — structured directory tree |
+| Audio | `transcribe` — local whisper.cpp audio transcription (OGG/WAV/MP3 → text) |
 
 All gated by the `danger` security classifier with three actions: allow, deny, prompt.
 - `shell`: Classifies commands into risk classes (safe, local_write, system_write, destructive, network_egress, code_execution, install, blocked).

docs/CHANGELOG.md

@@ -1,5 +1,75 @@
 # Changelog
 
+## v0.41.1 (2026-05-24) — Quality Hardening
+
+### Bug Fixes
+- **sort numeric** — empty lines no longer cause panic (`strings.Fields("")` index out of range). Guarded with `len(fa) > 0` check
+- **head_tail total** — `readHead` second scanner loop after EOF never executed, so total always equalled count for files larger than N. Removed dead loop
+- **telegram.go** — `builtinTools()` in Telegram handler was passing empty `TranscriptionConfig`, ignoring user's configured binary_path and models_dir. Now passes `resolved.Transcription`
+- **fileInfoTool** — named return `result string` shadowed by local `result fileInfoResult` (would fail compilation on any change)
+- **mathEvalTool** — named return `result string` shadowed by `result, err := evalMath()` which returns `float64`
+- **parallel_shell** — data race on `shCmd.Process.Kill()` vs `shCmd.Run()` from concurrent goroutines. Fixed with mutex-guarded Process access
+
+### Recoverability
+- Added `defer recover` to top-level Call methods of 11 tools: batch_patch, parallel_shell, http_batch, math_eval, diff, sort, base64, tr, json_query, tree, batch_read, glob, file_info
+- Every tool Call method now guards against panics with named returns and JSON error response
+
+### New Tests
+- Metadata (Name/Description/Schema) tests for all 15 perf tools
+- `TestSort_Numeric` — numeric sort correctness
+- `TestSort_NumericWithEmptyLine` — regression: empty line + numeric sort (was panic)
+- `TestHeadTail_HeadTotalAccuracy` — regression: total=100 not 3 for head(3) of 100 lines
+- `TestMultiGrep_GlobFilter` — glob filtering works across file types
+- `TestWordCount_BinaryFile` — binary files don't cause errors
+
+### Stats
+- 364 insertions, 26 deletions across 4 files
+- All tests pass with `-race`
+
+---
+
+## v0.41.0 (2026-05-24) — Native Audio Transcription
+
+### New Tool: `transcribe`
+- Transcribes audio files (OGG, WAV, MP3) to text using a local whisper.cpp CLI
+- Fully local — zero cloud APIs, no API keys, no credentials
+- Returns: `{text, duration_sec, segments, model, language}`
+- Streams via `exec.Command("whisper", "--model", ..., "--output-json", "--file", ...)` and parses JSON output
+
+### Dependency Management
+- If whisper CLI is missing → clear error with install instructions (brew / apt / git clone)
+- If model file is missing → clear error with download instructions (curl from HuggingFace)
+- No silent installs, no auto-downloads — tool errors until user installs dependencies
+
+### Configuration (`~/.odek/config.json`)
+```json
+{
+  "transcription": {
+    "model": "tiny",
+    "language": "en",
+    "auto_transcribe": true,
+    "models_dir": "~/.odek/whisper/models",
+    "binary_path": "/usr/local/bin/whisper"
+  }
+}
+```
+
+### Telegram Integration
+- Voice messages downloaded to `~/.odek/media/`
+- When `auto_transcribe: true` and whisper is available → transcribed text injected directly as user message
+- When `auto_transcribe: false` or transcription fails → file path passed to agent with `transcribe()` tool suggestion
+
+### Security
+- Path gated through `danger.ClassifyPath` + `O_NOFOLLOW`
+- Symlink paths rejected (tested)
+- Panic recovery in Call method
+
+### Stats
+- 590 lines across 12 files, 7 new tests, 0 new Go dependencies
+- External: whisper.cpp CLI (user installs, tool validates)
+
+---
+
 ## v0.40.1 (2026-05-24) — Security Hardening
 
 ### Panic Recovery

docs/CHEATSHEET.md

@@ -59,6 +59,25 @@ odek repl --sandbox --sandbox-image python:3.12
 
 Priority: `~/.odek/config.json` ← `./odek.json` ← `ODEK_*` env ← CLI flags.
 
+### Audio Transcription
+- **`transcribe`** tool uses local whisper.cpp CLI — no cloud APIs
+- Model files cached in `~/.odek/whisper/models/ggml-<model>.bin` (default: `tiny`, ~75 MB)
+- Configure via `transcription` section in config:
+
+```json
+{
+  "transcription": {
+    "model": "tiny",
+    "language": "en",
+    "auto_transcribe": true,
+    "models_dir": "~/.odek/whisper/models",
+    "binary_path": "/usr/local/bin/whisper"
+  }
+}
+```
+
+Settings: `model` (tiny/base/small/medium), `language` (ISO code, empty=auto), `auto_transcribe` (Telegram voice → text), `models_dir` (model directory), `binary_path` (whisper binary path).
+
 ## Memory System Architecture
 
 ### Three Tiers